Login Request a demo
XF
Product
X2000r Firmware
by Totolink · last CVE Sep 12, 2025
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 31High 4Medium 10Low 0
Severity
All severities45Critical31High4Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add X2000r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22529
9.8
2%
Jan 25
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa
Affected: 2.0.0-b20230727.10434
CVE-2024-0579
9.8
2%
Jan 16
Totolink X2000R formMapDelDevice command injection
Affected: 1.0.0-b20221212.1452
CVE-2023-7222
9.8
1%
Jan 9
Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow
Affected: 1.0.0-b20221212.1452
CVE-2023-7208
9.8
2%
Jan 7
Totolink X2000R_V2 boa formTmultiAP buffer overflow
Affected: 2.0.0-b20230727.10434
CVE-2023-51133
9.8
1%
Dec 30
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute
Affected: 1.0.0-b20230221.0948.web
CVE-2023-51136
9.8
1%
Dec 30
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule
Affected: 1.0.0-b20230221.0948.web
CVE-2023-51135
9.8
1%
Dec 30
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup
Affected: 1.0.0-b20230221.0948.web
CVE-2023-46547
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog
Affected: 1.0.0-b20230221.0948
CVE-2023-46548
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect
Affected: 1.0.0-b20230221.0948
CVE-2023-46549
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg
Affected: 1.0.0-b20230221.0948
CVE-2023-46540
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp
Affected: 1.0.0-b20230221.0948
CVE-2023-46551
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl
Affected: 1.0.0-b20230221.0948
CVE-2023-46552
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP
Affected: 1.0.0-b20230221.0948
CVE-2023-46553
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl
Affected: 1.0.0-b20230221.0948
CVE-2023-46554
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel
Affected: 1.0.0-b20230221.0948
CVE-2023-46555
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw
Affected: 1.0.0-b20230221.0948
CVE-2023-46556
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter
Affected: 1.0.0-b20230221.0948
CVE-2023-46557
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN
Affected: 1.0.0-b20230221.0948
CVE-2023-46558
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice
Affected: 1.0.0-b20230221.0948
CVE-2023-46559
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr
Affected: 1.0.0-b20230221.0948
CVE-2023-46560
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup
Affected: 1.0.0-b20230221.0948
CVE-2023-46562
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg
Affected: 1.0.0-b20230221.0948
CVE-2023-46563
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS
Affected: 1.0.0-b20230221.0948
CVE-2023-46564
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ
Affected: 1.0.0-b20230221.0948
CVE-2023-46550
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice
Affected: 1.0.0-b20230221.0948
CVE-2023-46541
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup
Affected: 1.0.0-b20230221.0948
CVE-2023-46542
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig
Affected: 1.0.0-b20230221.0948
CVE-2023-46543
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey
Affected: 1.0.0-b20230221.0948
CVE-2023-46544
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl
Affected: 1.0.0-b20230221.0948
CVE-2023-46545
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc
Affected: 1.0.0-b20230221.0948
CVE-2023-46546
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats
Affected: 1.0.0-b20230221.0948
CVE-2025-57579
8.0
1%
Sep 12
An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password
Affected: 2.0.0-b20230727.1043.web
CVE-2024-28404
8.0
0%
Mar 15
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page
Affected: before 1.0.0-b20231213.1013
CVE-2025-8181
7.2
1%
Jul 26
TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
Affected: 1.0.0
CVE-2025-9577
7.0
0%
Aug 28
TOTOLINK X2000R Administrative shadow.sample default credentials
Affected: 2.0.0-b20230727.1043.web
CVE-2025-5515
6.3
3%
Jun 3
TOTOLINK X2000R formMapDel command injection
Affected: 1.0.0-b20230726.1108
CVE-2025-5504
6.3
13%
Jun 3
TOTOLINK X2000R formWsc command injection
Affected: 1.0.0-b20230726.1108
CVE-2024-28402
5.9
0%
Mar 21
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page
Affected: before 1.0.0-b20231213.1013
CVE-2024-29419
5.4
0%
Mar 20
There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013
Affected: before 1.0.0-b20231213.1013
CVE-2024-28403
5.4
0%
Mar 15
TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page
Affected: before 1.0.0-b20231213.1013
CVE-2024-28401
5.4
0%
Mar 15
TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page
Affected: before 1.0.0-b20231213.1013
CVE-2025-5543
4.8
0%
Jun 3
TOTOLINK X2000R Parent Controls Page cross site scripting
Affected: 1.0.0-b20230726.1108
CVE-2025-5542
4.8
0%
Jun 3
TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting
Affected: 1.0.0-b20230726.1108
CVE-2025-5516
4.8
0%
Jun 3
TOTOLINK X2000R URL Filtering Page formFilter cross site scripting
Affected: 1.0.0-b20230726.1108
CVE-2024-33433
4.8
1%
May 13
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the…
Affected: before 1.0.0-b20231213.1013
Showing 45